VDB
CVE-2021-27608
CVE-2021-27608
PUBLISHED
CVSS 7.5 HIGH
An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability.
EPSS 0.12% · 30.9th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.12%
30.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Setup | < 9.0 |
| sap | setup | 9.0 |
Exploit Intelligence
Timeline
- Apr 13, 2021 CVE Published
- Apr 15, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 1, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Sep 5, 2022 EPSS Score